Heterogeneous application single sign-on system and method

Abstract

The embodiment of the invention provides a single sign-on method, device and system among heterogeneous systems. The heterogeneous application single sign-on system comprises a single sign-one control sub-system, an SSO server side, an application client side and a server side. The method includes the steps that the single sign-on control sub-system opens, logs on and pulls up the course / linear course of the application client side in a browser; the application client side sends a re-positioning request to the browser and is used for sending an ST request to the SSO server side through the browser so as to obtain the applied ST information; the SSO server side sends the applied ST information to the browser according to the ST information so as to enable the browser to send the applied ST information to the application client side; the application client side receives the applied ST information and sends a dialogue establishing request to the application server side according to the applied ST information; the application server side asks the SSO server side for authentication according to the applied ST information and establishes the dialogue information with the application client side after successful authentication.

Description

Technical field [0001] The embodiments of the present invention relate to the field of computer networks, and more specifically, to a heterogeneous application single sign-on system and a single sign-on method thereof. Background technique [0002] Due to the rapid development of web technology, some systems have gradually evolved from the previous C / S model to the B / S model. However, for some large-scale systems, it takes a long period of development and realization to realize the web-based function of the whole system. Therefore, during this period of time, there will be situations where C / S and B / S modes coexist. As a result, an application scenario of "interaction between web browser applications and local process applications" appears. [0003] In the above scenario, if the user logs in through a web browser, and when the user performs an operation in the browser, if the local application needs to be called, the browser needs to pull up a local application. At this time, bec...

AI Technical Summary

Problems solved by technology

At this time, due to the isolation of the local application from the browser operating environment, user role information cannot be shared (user information is cached in the browser process in the B / S environment, and the local process of the C / S cannot be obtained), and if the user ID is passed For local applications, there are certain security risks

Images